Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F23989ECFEA111ED9525C06B4AD9E6FC.roa
File:                     F23989ECFEA111ED9525C06B4AD9E6FC.roa (raw, json)
Hash identifier:          61leEDkcxZ3gXXlSmqPhYxAkwAyZvHSHqv28VGruVAI=
Subject key identifier:   6B:17:91:8F:98:7F:11:74:30:43:CD:D9:E5:40:44:7E:FE:0B:BB:19
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2868
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F23989ECFEA111ED9525C06B4AD9E6FC.roa
Signing time:             Tue 30 May 2023 04:25:03 +0000
ROA not before:           Tue 30 May 2023 04:24:58 +0000
ROA not after:            Wed 15 May 2024 04:24:58 +0000
asID:                     63888
IP address blocks:        154.207.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10344 (0x2868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 30 04:24:58 2023 GMT
            Not After : May 15 04:24:58 2024 GMT
        Subject: CN=64757a9e-cc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:1a:66:14:95:c1:3e:04:0f:c1:5a:45:c4:
                    fb:5c:3e:e0:d9:16:56:af:64:95:0b:91:03:05:b5:
                    76:cb:f0:bc:ae:20:56:ff:95:81:19:8c:e2:11:5b:
                    92:ae:8b:7d:75:b3:04:ab:17:bf:27:aa:7a:0e:25:
                    bb:60:3d:48:7d:72:96:ec:72:44:87:d2:1c:a5:24:
                    29:e6:df:b5:72:05:93:6b:14:b3:3f:ad:4f:8f:92:
                    3c:04:98:fa:d7:fa:0c:73:d7:5e:e9:6a:a0:a8:fb:
                    d8:e6:c8:48:26:0c:92:7e:22:a1:85:8e:da:69:90:
                    2f:7e:c5:bc:00:0f:1b:0d:c3:bc:19:4e:83:f8:be:
                    95:c1:21:d9:40:20:4a:ef:d9:82:ab:1f:91:a7:01:
                    cf:9c:70:b8:38:d9:43:a9:29:f8:fe:31:b4:ba:61:
                    8b:67:85:ce:55:20:8d:b6:06:29:80:67:3f:03:1c:
                    a6:9d:fd:1d:7a:f2:1a:e3:49:20:c0:05:bc:6f:7b:
                    6e:b6:5e:c2:a3:ba:12:10:8e:66:d8:f0:11:11:57:
                    12:6e:ea:34:7b:a9:69:7a:8a:6d:ae:26:b5:b2:f7:
                    f1:7c:fb:12:1f:00:73:21:10:1e:48:37:5b:56:4f:
                    5d:37:bc:5c:1d:d7:4c:63:05:b5:4a:66:59:46:14:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:91:8F:98:7F:11:74:30:43:CD:D9:E5:40:44:7E:FE:0B:BB:19
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F23989ECFEA111ED9525C06B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:7e:e6:2d:e1:b0:c3:73:9d:77:9d:b2:17:83:0e:01:92:30:
         b5:85:15:22:5e:61:8d:1e:a2:ea:d0:78:d8:30:8e:bc:14:09:
         04:5e:89:db:4c:b9:06:d3:fd:1f:fd:7f:0c:f7:4f:46:13:52:
         1b:b3:0f:9d:cc:7c:f9:72:6e:bb:cc:26:2e:8e:90:0e:6b:d7:
         6c:37:7e:3a:26:a9:06:9c:60:18:99:6b:52:a6:8e:a2:a9:69:
         7c:4d:9d:e3:56:a9:5a:92:a1:62:8f:ea:a3:a6:04:6a:5a:ba:
         0a:59:01:78:e8:ee:9a:a1:ef:ee:6d:08:da:5d:67:60:32:71:
         80:eb:39:ec:45:f6:57:0e:05:38:66:97:be:16:10:f7:76:7b:
         4d:d4:64:73:30:14:a9:dc:af:07:83:ae:7a:ff:27:63:1a:76:
         30:38:44:67:4c:40:95:e8:7b:f8:1d:28:fa:5c:39:ef:87:fd:
         81:ab:2d:d6:5b:a3:0e:c4:88:c6:76:0b:95:10:27:a7:4c:82:
         2c:84:68:7d:e0:5a:8d:a5:6b:10:88:3b:24:3d:50:23:fa:bf:
         c9:21:fc:34:9c:9a:0a:ed:55:fa:3b:34:92:12:61:a3:36:af:
         67:4f:4b:f4:90:b3:f8:75:fa:ff:af:33:31:d4:8b:26:28:26:
         38:d5:e0:c5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICKGgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA1MzAwNDI0NThaFw0yNDA1MTUwNDI0NThaMBgxFjAU
BgNVBAMTDTY0NzU3YTllLWNjNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCZBpmFJXBPgQPwVpFxPtcPuDZFlavZJULkQMFtXbL8LyuIFb/lYEZjOIR
W5Kui311swSrF78nqnoOJbtgPUh9cpbsckSH0hylJCnm37VyBZNrFLM/rU+PkjwE
mPrX+gxz117paqCo+9jmyEgmDJJ+IqGFjtppkC9+xbwADxsNw7wZToP4vpXBIdlA
IErv2YKrH5GnAc+ccLg42UOpKfj+MbS6YYtnhc5VII22BimAZz8DHKad/R168hrj
SSDABbxve262XsKjuhIQjmbY8BERVxJu6jR7qWl6im2uJrWy9/F8+xIfAHMhEB5I
N1tWT103vFwd10xjBbVKZllGFJvPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUaxeR
j5h/EXQwQ83Z5UBEfv4LuxkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0YyMzk4OUVDRkVBMTExRUQ5NTI1QzA2QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaz0EwDQYJKoZIhvcNAQEL
BQADggEBAGF+5i3hsMNznXedsheDDgGSMLWFFSJeYY0eourQeNgwjrwUCQReidtM
uQbT/R/9fwz3T0YTUhuzD53MfPlybrvMJi6OkA5r12w3fjomqQacYBiZa1KmjqKp
aXxNneNWqVqSoWKP6qOmBGpaugpZAXjo7pqh7+5tCNpdZ2AycYDrOexF9lcOBThm
l74WEPd2e03UZHMwFKncrweDrnr/J2MadjA4RGdMQJXoe/gdKPpcOe+H/YGrLdZb
ow7EiMZ2C5UQJ6dMgiyEaH3gWo2laxCIOyQ9UCP6v8kh/DScmgrtVfo7NJISYaM2
r2dPS/SQs/h1+v+vMzHUiyYoJjjV4MU=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:42 2024 by rpki-client on console-fra.rpki-client.org